Bookmarklet hijacking

Chromium Proof of Concept

Steps to reproduce

1. Double-check that the link executes alert(1)

2. Drag & drop the link to Bookmarks (tool)bar

3. Double-check that the link executes alert(1)

4. Click the link in Bookmarks; it executes alert(2)


Save this cool bookmarklet!

Firefox Proof of Concept

Steps to reproduce

1. Double-check that the link executes alert(1)

2. Right-click & Bookmark link... & Save

3. Double-check that the link executes alert(1)

4. Click the link in Bookmarks; it executes alert(2)


Save this cool bookmarklet!